Merge pull request #577 from appuio/set-Content-Security-Policy-headers

Deny frame ancestors

Author: bastjan

docker/nginx.conf

@@ -6,6 +6,9 @@ server {
          index  index.html;
 
          try_files $uri $uri/ /index.html?$args;
+
+         add_header X-Frame-Options "DENY";
+         add_header Content-Security-Policy "frame-ancestors 'none';";
     }
     location /appuio-api/ {
          proxy_pass ${APPUIO_API};